The client certificate must contain the user principal name (UPN) of the user (in the certificate's Subject or Subject Alternative Name fields). The client certificate must be issued for client authentication (for example, the default User certificate template in AD CS). Here's more information about the certificate requirements: For more information about AD CS, see Active Directory Certificate Services Overview. An example of an automated internal PKI is Active Directory Certificate Services (AD CS). Because of the sheer number of certificates involved, you should use an automated internal public key infrastructure (PKI) to issue and manage the client certificates. Certificate based authentication (CBA) in Exchange allows Outlook on the web (formerly known as Outlook Web App) and Exchange ActiveSync clients to be authenticated by client certificates instead of entering a username and password.īefore you configure Exchange, you need to issue a client certificate to each user.
0 kommentar(er)
